Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier: Q87QKcN0drKCV/0AAVUN5sgfR5tqLR7rMEjyo7GWt4M=
Subject key identifier: 88:98:69:89:94:69:6B:5E:C3:93:48:D2:5E:C9:C0:84:9E:D7:84:BB
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 0194BD4ECBB15F4409244F170BA75BB17B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number: 05A0
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: gUEl3w41FS4tTloq/kncdJeKOjxcByvkA8skT39lqFU=)
2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cb:b1:5f:44:09:24:4f:17:0b:a7:5b:b1:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=8898698994696b5ec39348d25ec9c0849ed784bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:f5:95:fe:5e:62:3c:97:84:0a:0e:08:7e:
2b:b3:7a:c1:8d:74:50:b9:9b:5e:b2:9f:39:75:d7:
5a:18:eb:47:b2:83:39:bd:8e:48:76:08:96:02:94:
fc:47:6a:bf:24:70:15:25:bc:fd:ba:1b:44:88:17:
c2:51:5b:2c:1e:b6:6c:6c:82:1d:e3:c0:6e:1f:b7:
9a:5f:14:6c:ba:e1:09:b6:97:aa:72:d6:9f:83:4b:
a7:1b:fc:be:e1:b4:60:87:74:95:fa:24:4d:36:30:
10:f3:e0:01:4c:71:0e:11:64:33:49:eb:f2:81:f1:
34:50:d8:13:ec:bf:7a:9e:f7:95:14:08:3f:d4:15:
36:58:57:cf:19:c9:a5:6b:79:cf:4e:63:3a:8d:3e:
46:0d:39:e4:51:be:d9:11:01:cb:7e:8b:04:c6:6f:
69:c4:8a:13:7a:b9:fb:72:69:30:6d:88:36:9f:99:
7b:54:63:d8:05:6f:21:9b:ec:03:c2:22:54:7b:7e:
db:a0:ff:34:b0:17:76:22:19:50:78:0a:e6:77:8e:
cb:89:f8:8a:44:8f:9e:4f:32:72:48:d1:c5:f6:48:
a3:2f:f4:ed:7f:9c:db:e8:b8:3f:5a:d1:90:2c:58:
be:e2:4a:90:35:5c:6c:2c:c2:f8:e9:7d:34:63:4d:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:69:89:94:69:6B:5E:C3:93:48:D2:5E:C9:C0:84:9E:D7:84:BB
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:21:75:c0:fa:cd:2e:5e:9d:2c:bd:aa:f8:93:9d:04:52:46:
32:bb:07:06:17:54:57:08:4a:35:31:02:58:d9:82:e2:9c:44:
21:c7:77:57:80:b0:3a:7a:e2:88:e7:01:e2:7a:2e:77:7f:38:
28:d9:72:47:f2:5b:27:39:40:44:12:9a:d7:6e:49:13:c5:21:
e0:57:bf:43:33:ed:98:e2:48:06:85:09:be:9a:5e:ec:7a:c4:
4d:0a:4a:9f:d2:62:af:f1:1a:d9:91:9b:37:2f:f7:a3:68:81:
3b:e7:b2:3d:05:c0:e7:24:cb:d2:29:a2:e1:f2:e7:ad:f8:a7:
23:e4:01:e8:a8:dd:b8:78:3e:a9:85:e7:84:67:11:7b:ad:4f:
b2:a7:e8:96:bb:eb:9e:3e:82:b9:d7:cd:ba:d9:7c:7e:80:a6:
54:cc:d9:f4:8b:b4:f2:00:7b:91:2f:ef:f3:e5:d0:db:e8:2b:
bd:a4:ca:3f:3f:93:1b:27:82:04:0a:2e:b9:30:a5:ba:d1:41:
c0:87:da:bf:88:37:78:76:8d:12:3c:dc:6f:9a:04:8c:12:7f:
63:c2:1f:11:27:42:8b:da:b0:89:8a:cf:f0:36:1c:be:d1:71:
3f:99:fa:20:f1:ac:5d:3a:8e:4d:5e:98:35:5d:87:8d:4c:cf:
68:a1:2c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsuxX0QJJE8XC6dbsXuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYTM4OTMzMzU4Y2Y2NmNmZjNiNmNlM2Y3YmMyNTE3ZmRk
NDc0MjEwHhcNMjUwMTMxMTcwMDQ1WhcNMjUwMjAxMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg4ODk4Njk4OTk0Njk2YjVlYzM5MzQ4ZDI1ZWM5YzA4NDllZDc4NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tn1lf5eYjyXhAoOCH4rs3rBjXRQ
uZtesp85dddaGOtHsoM5vY5IdgiWApT8R2q/JHAVJbz9uhtEiBfCUVssHrZsbIId
48BuH7eaXxRsuuEJtpeqctafg0unG/y+4bRgh3SV+iRNNjAQ8+ABTHEOEWQzSevy
gfE0UNgT7L96nveVFAg/1BU2WFfPGcmla3nPTmM6jT5GDTnkUb7ZEQHLfosExm9p
xIoTern7cmkwbYg2n5l7VGPYBW8hm+wDwiJUe37boP80sBd2IhlQeArmd47LifiK
RI+eTzJySNHF9kijL/Ttf5zb6Lg/WtGQLFi+4kqQNVxsLML46X00Y02eHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiYaYmUaWtew5NI0l7JwISe14S7MB8GA1UdIwQY
MBaAFCujiTM1jPZs/zts4/e8JRf91HQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgt
ZTA2ZmQwY2QzYjc3LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgtZTA2ZmQwY2QzYjc3
LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSF1wPrN
Ll6dLL2q+JOdBFJGMrsHBhdUVwhKNTECWNmC4pxEIcd3V4CwOnriiOcB4noud384
KNlyR/JbJzlARBKa125JE8Uh4Fe/QzPtmOJIBoUJvppe7HrETQpKn9Jir/Ea2ZGb
Ny/3o2iBO+eyPQXA5yTL0imi4fLnrfinI+QB6KjduHg+qYXnhGcRe61Psqfolrvr
nj6CudfNutl8foCmVMzZ9Iu08gB7kS/v8+XQ2+grvaTKPz+TGyeCBAouuTClutFB
wIfav4g3eHaNEjzcb5oEjBJ/Y8IfESdCi9qwiYrP8DYcvtFxP5n6IPGsXTqOTV6Y
NV2HjUzPaKEsRw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:14 2025 by rpki-client